[Dshield] More stuff from Korea

Simon Murcott simon at murcott.net
Fri May 18 01:14:35 GMT 2001


Quoting "Johannes B. Ullrich" <7ellerton at mediaone.net>:

> As you know, last week a great deal of scans to 111 and 80 were
> originating
> from Asia. As it moved to other networks, it was evident that a worm
> was on
> the loose.
> 
> I have noticed scans from many of these Asian networks looking for
> port
> 10008. Is there a connection? 

This article seems to sum it up:

http://news.cnet.com/news/0-1003-200-5949401.html




More information about the list mailing list